Vulnerabilities > ISC > INN > 1.7.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-11-11 | CVE-2012-3523 | Permissions, Privileges, and Access Controls vulnerability in ISC INN The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. | 6.8 |
2000-10-20 | CVE-2000-0360 | Unspecified vulnerability in ISC INN Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. | 5.0 |
2000-04-27 | CVE-1999-0706 | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | 7.5 |